Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.cer (raw, json)
Hash identifier: cfUs3ZrKwos0RDsYEBdfS+90bRQHCON3BZQY+zxwitI=
Subject key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F897250201082B3FE8DE068846E86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12483
IP: 91.221.186.0/23
IP: 185.218.228.0/22
IP: 193.3.133.0/24
IP: 193.111.64.0/23
IP: 195.190.134.0/24
IP: 212.93.32.0/19
IP: 2001:67c:bc::/48
IP: 2a04:a880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:89:72:50:20:10:82:b3:fe:8d:e0:68:84:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:ae:57:ed:9b:3c:2e:78:d1:df:98:c8:06:
91:53:cc:4d:17:95:07:0c:6a:d1:35:f8:aa:9a:c6:
2e:d6:83:9f:96:53:a2:72:94:12:f2:54:6c:9e:c3:
a5:e7:87:01:2a:cb:dc:6e:99:a5:de:0c:9f:e9:55:
05:4b:86:68:04:6c:e4:4a:ab:01:5e:1d:e5:c7:a4:
91:d5:21:ed:12:ea:93:20:83:1d:5e:d1:5d:38:9d:
03:17:08:8d:7d:14:38:6e:4f:0d:f8:86:7e:0e:ee:
68:9f:44:87:51:ba:54:d0:1f:e3:fc:bb:a9:54:e9:
e2:b3:b9:51:f0:a9:3e:14:6a:01:71:79:16:30:ce:
6e:51:f5:9e:21:53:48:17:9d:4f:34:ca:61:d9:8f:
ee:39:29:95:83:48:24:48:f4:52:63:07:7e:cf:da:
5f:d2:4c:c0:af:91:1d:34:a3:08:b7:36:21:62:5a:
ec:48:b9:1c:d5:39:05:57:de:5d:89:2d:91:3b:a1:
c8:09:fe:d3:90:c9:9d:ba:21:80:b1:c0:14:1f:64:
cf:d8:f7:c7:07:f6:ae:ad:97:6f:61:7e:e3:30:39:
2a:a4:4e:53:d8:4a:ef:d5:47:31:69:e9:44:69:a5:
30:f9:1e:03:23:32:ae:db:d5:e9:32:08:6a:b7:65:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.186.0/23
185.218.228.0/22
193.3.133.0/24
193.111.64.0/23
195.190.134.0/24
212.93.32.0/19
IPv6:
2001:67c:bc::/48
2a04:a880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12483
Signature Algorithm: sha256WithRSAEncryption
4a:20:da:c1:63:33:6b:44:5e:3a:23:0b:3e:0f:28:7a:b8:4e:
1c:29:37:5b:1d:a2:84:ab:70:0f:b9:23:02:d3:4a:dd:fd:b8:
cd:e2:61:fa:f8:fd:56:5b:65:1e:67:d9:1c:dc:d2:b2:05:ea:
be:08:c3:0f:95:d3:7a:ff:26:4e:95:f5:5d:d2:b2:c4:e1:ff:
a8:72:47:9e:15:67:fc:5f:cd:bf:f9:c4:a0:44:33:2d:21:51:
73:7a:cf:cf:1f:8f:e5:19:a8:19:b1:c4:c3:ac:b2:5e:41:98:
f9:5d:df:40:c3:f3:44:5c:d1:c0:7f:81:7a:1a:9f:2e:55:8d:
49:bb:43:70:a2:c2:6b:2b:86:d2:f5:9e:8c:e8:47:8a:21:e9:
9b:14:86:0e:43:f0:69:91:da:bb:2f:e8:26:6f:99:34:89:a8:
d6:fc:1e:f8:82:31:27:a8:57:26:5f:57:31:c0:a5:04:75:49:
4b:27:d1:21:7e:03:0c:43:95:81:41:52:e1:32:06:d5:ba:c8:
7d:9a:50:f8:ca:fd:65:08:8f:eb:78:5a:40:35:3a:0f:d1:d0:
26:7c:8e:3e:70:f1:df:c5:7d:d6:e4:c0:da:6b:b3:cd:e6:a0:
39:61:ab:e8:0b:3f:c1:e7:3b:8a:6a:2d:83:30:72:63:5e:e9:
63:07:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:57:26 2025 by rpki-client